
Reimagining Cyber · 2026-05-27 · 27 min
The 2026 Verizon DBIR is here - and one finding changes the conversation around cyber risk. For years, the industry has focused on identity as the primary attack surface. But according to the latest Data Breach Investigations Report, vulnerability exploitation has now overtaken credential abuse as the most common initial access vector in breaches. In this episode of Reimagining Cyber , Tyler Moffitt breaks down what the report really means for defenders, MSPs, and SMBs. He explores why attackers are moving faster than patch cycles, how AI is accelerating both exploitation and phishing, and why “identity vs. patching” is the wrong debate.